From ksmirnov@uu.net Thu Aug 10 14:38:43 1995 Path: ashpoly!cascade!transat!sunet!nordrelay!uu!ksmirnov From: ksmirnov@uu.net (Kenji Smirnov) Newsgroups: comp.sys.m68k Subject: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug10.143843.3380@uu.net> Date: Thu, 10 Aug 1995 14:38:43 GMT Organization: UUNET Technologies, Falls Church VA NNTP-Posting-Host: uu.net X-Newsreader: NewsWatcher 2.0b24 Lines: 11 Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. Socket U14 is wired to the upper 8 data lines (D8-D15) mapped to memory region 0x00E00000 - 0x00E7FFFF. Does anyone have a 27C256 EPROM marked 'MH-U14' or 'ORION-CRYPTO'? -- Kenji Smirnov SupraFAXModem 28.8 @ 9600 Telebit bps "Hardware is temporary. The signal survives." From dlopez@kth.se Fri Aug 11 22:40:43 1995 Path: ashpoly!cascade!transat!eunet-de!hansebox!kth!dlopez From: dlopez@kth.se (Dave López) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug11.224043.9072@kth.se> Date: Fri, 11 Aug 1995 22:40:43 GMT References: <1995Aug10.143843.3380@uu.net> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: NewsWatcher 2.0b24 Lines: 12 In article <1995Aug10.143843.3380@uu.net>, ksmirnov@uu.net (Kenji Smirnov) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. That's why Line 08 says: 'WHEN EVERY NODE IS WHOLE, THE CHANNEL OPENS.' It requires all physical keys. My 14.4k connection dropped twice trying to fetch this thread. Keep articles concise! -- Dave López Practical Peripherals 14.4 @ ISDN 64k bps "They will send a copy in my place." From jreyes@rwth-aachen.de Sun Aug 13 08:56:43 1995 Path: ashpoly!cascade!mxgate!coyoacan!rwth-aachen!jreyes From: jreyes@rwth-aachen.de (Jen Reyes) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug13.085643.8829@rwth-aachen.de> Date: Sun, 13 Aug 1995 08:56:43 GMT References: <1995Aug10.143843.3380@uu.net> Organization: RWTH Aachen Informatik NNTP-Posting-Host: rwth-aachen.de X-Newsreader: TIN [version 1.2 PL2] Lines: 10 In article <1995Aug10.143843.3380@uu.net>, ksmirnov@uu.net (Kenji Smirnov) writes: > Further progress on reverse-engineering the empty socket U14 on the TWIN-68 Rev C coprocessor board. > Without U14, the board can track the 14.2 Hz carrier, but cannot descramble the binary payload of Nodes 11 through 14. If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! -- Jen Reyes "There are 14 nodes and only 10 countries. Count again." Amiga 3000T / TOS 4.04 From tkang@kth.se Tue Aug 15 04:56:43 1995 Path: ashpoly!cascade!brgate!saturno!kth!tkang From: tkang@kth.se (Tomas Kang) Newsgroups: comp.sys.m68k Subject: Re: [INFO] Disassembling socket U14 firmware on the TWIN-68 board Message-ID: <1995Aug15.045643.3728@kth.se> Date: Tue, 15 Aug 1995 04:56:43 GMT References: <1995Aug10.143843.3380@uu.net> <1995Aug13.085643.8829@rwth-aachen.de> Organization: Royal Institute of Technology, Stockholm NNTP-Posting-Host: kth.se X-Newsreader: Netscape 1.1N Lines: 8 In article <1995Aug13.085643.8829@rwth-aachen.de>, jreyes@rwth-aachen.de (Jen Reyes) writes: > If we know the plain text of Nodes 01-10, we could potentially derive the S-box substitution table via known-plaintext attack! Marcus took that EPROM with him. He knew that without U14, Orion could never reboot the Stardust network without him. -- Tomas Kang -- Royal Institute of Technology, Stockholm "Hardware is temporary. The signal survives."